HIPAA and Doulas: What You Need to Know

What's HIPAA, Anyway?

HIPAA stands for the Health Insurance Portability and Accountability Act. It's a U.S. law from 1996 that protects protected health information (PHI)—stuff like your client's medical history, birth plans, or postpartum details. It's all about keeping that info private and secure. HIPAA mainly applies to covered entities (think doctors, hospitals, insurance companies) and their business associates (people or companies they share PHI with).

So, where do doulas fit in? Let's dig into that.

Are Doulas Covered Entities?

Short answer: usually not. Here's why: Covered entities are healthcare providers who do things like diagnose, treat, or bill insurance electronically. Doulas, though? You're all about emotional and physical support—amazing, vital work, but not medical care. You don't typically send bills to insurance or use electronic systems that trigger HIPAA. So, if you're an independent doula hired directly by clients, you're probably not a covered entity under HIPAA.

What About Business Associates?

This is where it gets interesting. If you work for a covered entity—like a hospital or doctor's office—and they share PHI with you, you might be a business associate. That means HIPAA could apply. For example:

• Scenario 1: A hospital hires you to support laboring moms. They give you access to patient records so you can coordinate with the team. Boom—you're a business associate, and HIPAA rules kick in. You'd need a business associate agreement (BAA) with the hospital to stay compliant.

• Scenario 2: A client hires you directly for prenatal visits and postpartum care. You jot down their health info in your notes, but you're not tied to a hospital or doctor. No covered entity is involved, so HIPAA doesn't apply here.

See the difference? It's all about who you're working with and how you get that PHI.

Independent Doulas and Privacy

Okay, so if you're an independent doula and HIPAA doesn't apply, are you off the hook? Not quite. You still handle sensitive stuff—your clients trust you with personal details! Even without HIPAA, state laws might step in. For instance, California's Confidentiality of Medical Information Act (CMIA) could apply if you're handling health data there. Plus, it's just good ethics to keep that info safe—think locked files or secure apps.

That's where Kins comes in handy. I built Kins to help doulas like you manage client info easily and securely. With Kins, you can store notes, track appointments, and even log mileage (yep, like we talked about in our last post), all in one safe spot. It's peace of mind for you and your clients.

Real-Life Examples

Let's make this concrete:

• Hospital Doula: Sarah works part-time at a birth center. They share patient charts with her so she knows who's in labor. She's a business associate, so she follows HIPAA—keeping PHI locked down and signing a BAA with the center.

• Solo Doula: Maria runs her own practice. A client tells her about a past C-section during a coffee chat. Maria writes it in her Kins app but doesn't share it with anyone else. No HIPAA here, but she still uses Kins' secure storage to protect it.

Different setups, different rules—but privacy matters either way.

What Should You Do?

Here's your game plan:

1. Check Your Setup: Are you tied to a hospital or clinic? Look for a BAA in your contract—if it's there, HIPAA applies.
2. Know Your State: Some states have privacy laws that might affect you, even if HIPAA doesn't. A quick Google or chat with a local doula group can clue you in.
3. Lock It Down: Use secure tools (like Kins!) for notes and communication. Passwords, encryption—keep it tight.
4. Ask If Unsure: When in doubt, a legal pro can sort it out for your specific situation.

Official Word from the Experts

The U.S. Department of Health and Human Services (HHS) says covered entities are healthcare providers, plans, or clearinghouses doing electronic transactions—doulas don't usually fit that mold unless they're business associates. Check out their full scoop here. For business associate details, they've got more here. All current as of March 2025!

Wrapping Up

So, does HIPAA apply to doulas? It depends. If you're a business associate of a covered entity, yes—follow the rules. If you're independent, probably not—but protect that PHI anyway. Tools like Kins make it easier to stay organized and secure, whether HIPAA's watching or not. Got questions? Drop a comment—I'd love to chat more!

Happy supporting,
Davidson
Creator of Kins

Key Citations:

• HHS: Covered Entities
• HHS: Business Associates